Privacy Policy
Open Access Helper — Safari/Chrome Extension, iPadOS & iOS App, and oahelper.org
Last updated: April 2026
Who Is Behind This?
Open Access Helper is a free, personal project. I built and maintain it on my own, and I take your privacy seriously. This policy explains what data is collected, why, and by whom — in plain language.
Note: I am not a lawyer. This policy reflects my genuine best efforts to be transparent and compliant with applicable law, including the EU General Data Protection Regulation (GDPR). If you have any questions or concerns, please get in touch.
What Data Is Collected and Why?
1. Analytics (App & Extension)
Since version 2022.9 (September 2022), the app uses TelemetryDeck to collect basic, anonymised usage statistics. This helps me understand how the app is being used so I can improve it.
- No personally identifiable information is sent to TelemetryDeck.
- TelemetryDeck further anonymises the data on their end.
- The legal basis for this processing is my legitimate interest in improving the app (Art. 6(1)(f) GDPR).
The oahelper.org website uses Matomo Analytics, with cookies disabled, to collect basic traffic statistics. No personal data is stored by Matomo in this configuration.
2. Third-Party APIs (App & Extension)
To find open access versions of papers, the app interacts with several external services. Which services are used depends on your settings. In each case, your DOI (Digital Object Identifier) or search query is sent to the relevant service.
| Service | Purpose | Privacy Policy | Always Active? |
|---|---|---|---|
| unpaywall.org | Find open access versions | Policy | Yes |
| TelemetryDeck | Usage analytics | Policy | Yes |
| core.ac.uk | Find open access versions & search | Policy | Optional |
| opencitations.net | Citation counts | Website | Optional |
| europepmc.org | Find open access versions | Policy | Optional |
| EBSCOhost Entitlement API | Library access check | Policy | Optional |
When following redirect chains to locate a paper, the macOS app visits each intermediate URL. Each server along the chain will see your IP address. This behaviour does not occur on iOS.
Legal basis: These API calls are necessary to provide the core functionality of the service (Art. 6(1)(b) GDPR).
3. This Website (oahelper.org)
Server Logs
The website runs on a virtual private server hosted at IONOS SE, Montabaur (Germany). Apache web server logs are created whenever you visit the site. These logs include:
- Your anonymised IP address (the last octet is removed — e.g.
101.111.112.113becomes101.111.112.0) - Browser type and version
- Operating system
- Language preferences
- Date and time of visit
Log data is used solely for security and operational purposes and is not shared with third parties.
Legal basis: Legitimate interest in the secure and reliable operation of the website (Art. 6(1)(f) GDPR).
Cookies
This website uses WordPress, which sets a small number of functional cookies required for the site to operate correctly. A cookie consent mechanism is also in place. No advertising or tracking cookies are used.
4. Document Delivery Forms
Some libraries use a custom document delivery form hosted on oahelper.org. If you use one of these forms:
- You will be asked to provide limited personal information (e.g. your name and email address).
- This information is used solely to generate and send an email to your library on your behalf.
- oahelper.org does not store your form data. It is transmitted via email only.
- Email delivery is handled by 1&1 IONOS SE, Montabaur, Germany.
- Some forms include Google reCAPTCHA to prevent automated submissions. If enabled, you will see an “I am not a robot” checkbox. Google’s processing of reCAPTCHA data is governed by Google’s Privacy Policy.
If you prefer not to use Google reCAPTCHA or the Ask the Library feature, please contact your library for an alternative submission method, and disable the feature in the app settings.
Legal basis: Processing is necessary to fulfil your request (Art. 6(1)(b) GDPR).
5. Email Contact
If you email me directly, your message will be forwarded to and stored in Gmail (Google LLC). Please be mindful of what personal information you include in your message.
Your Rights Under GDPR
As a resident of the EU/EEA, you have the following rights regarding your personal data:
- Right of access — You can request a copy of the data held about you.
- Right to erasure — You can request deletion of your data where no legal obligation requires its retention.
- Right to rectification — You can request correction of inaccurate data.
- Right to object — You can object to processing based on legitimate interests.
- Right to lodge a complaint — You have the right to complain to a supervisory authority. In Germany, the relevant authority is the Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI) or your state’s data protection authority.
To exercise any of these rights, please contact me.
Data Retention
- Server logs are retained for a limited period for operational and security purposes.
- Form data is not retained by oahelper.org.
- Email correspondence is retained in Gmail for as long as is reasonably necessary.
International Data Transfers
Some of the third-party services listed above (e.g. Google, TelemetryDeck, Unpaywall) may process data outside the EU/EEA. Where this is the case, I rely on those services’ own compliance mechanisms (e.g. Standard Contractual Clauses) for lawful transfer.
Contact
If you have any questions about this privacy policy or how your data is handled, please get in touch:
Claus Wolf
Am Hergert 1
64853 Otzberg
Germany
info [at] oahelper.org
This policy may be updated from time to time. The date at the top of this page reflects the most recent revision.